City: Alsvag
Region: Nordland
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: Altibox AS
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 79.161.159.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60636
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;79.161.159.142. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019063000 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 00:20:55 CST 2019
;; MSG SIZE rcvd: 118142.159.161.79.in-addr.arpa domain name pointer 142.79-161-159.customer.lyse.net.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
142.159.161.79.in-addr.arpa name = 142.79-161-159.customer.lyse.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 168.128.86.35 | attack | Oct 29 17:06:36 TORMINT sshd\[6526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.128.86.35 user=root Oct 29 17:06:39 TORMINT sshd\[6526\]: Failed password for root from 168.128.86.35 port 49104 ssh2 Oct 29 17:12:22 TORMINT sshd\[6770\]: Invalid user elasticsearch from 168.128.86.35 Oct 29 17:12:22 TORMINT sshd\[6770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.128.86.35 ... |
2019-10-30 05:19:57 |
| 118.68.122.26 | attackbots | Unauthorized connection attempt from IP address 118.68.122.26 on Port 445(SMB) |
2019-10-30 05:21:04 |
| 115.88.201.58 | attackspambots | Automatic report - Banned IP Access |
2019-10-30 05:07:07 |
| 87.117.2.240 | attackspam | Unauthorized connection attempt from IP address 87.117.2.240 on Port 445(SMB) |
2019-10-30 05:14:49 |
| 13.125.197.34 | attackspambots | 10/29/2019-16:58:46.036383 13.125.197.34 Protocol: 6 ET SCAN Potential SSH Scan |
2019-10-30 05:00:34 |
| 106.51.141.20 | attackbots | Oct 29 21:53:06 server sshd\[7649\]: Invalid user tomcat from 106.51.141.20 Oct 29 21:53:06 server sshd\[7649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.141.20 Oct 29 21:53:09 server sshd\[7649\]: Failed password for invalid user tomcat from 106.51.141.20 port 36854 ssh2 Oct 29 23:16:33 server sshd\[29347\]: Invalid user suwit from 106.51.141.20 Oct 29 23:16:33 server sshd\[29347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.141.20 ... |
2019-10-30 05:00:50 |
| 37.59.58.142 | attack | Oct 29 19:10:14 *** sshd[7678]: Failed password for invalid user mongod from 37.59.58.142 port 48888 ssh2 Oct 29 19:23:16 *** sshd[7958]: Failed password for invalid user apache from 37.59.58.142 port 45414 ssh2 Oct 29 19:31:40 *** sshd[8120]: Failed password for invalid user maik from 37.59.58.142 port 38060 ssh2 Oct 29 19:40:12 *** sshd[8303]: Failed password for invalid user laur from 37.59.58.142 port 58942 ssh2 Oct 29 19:52:42 *** sshd[8550]: Failed password for invalid user tt from 37.59.58.142 port 33802 ssh2 Oct 29 19:56:56 *** sshd[8599]: Failed password for invalid user 1234 from 37.59.58.142 port 44244 ssh2 Oct 29 20:01:03 *** sshd[8669]: Failed password for invalid user Cold@2017 from 37.59.58.142 port 54692 ssh2 Oct 29 20:05:10 *** sshd[8760]: Failed password for invalid user 123 from 37.59.58.142 port 36900 ssh2 Oct 29 20:09:19 *** sshd[8865]: Failed password for invalid user yuri!@# from 37.59.58.142 port 47340 ssh2 Oct 29 20:13:32 *** sshd[8912]: Failed password for invalid user !QAZ2wsx from |
2019-10-30 05:07:24 |
| 35.175.208.70 | spambotsattack | IP address used to send mail with hacked mail accounts |
2019-10-30 05:17:08 |
| 221.162.255.66 | attack | Oct 29 06:04:23 *** sshd[9690]: Failed password for invalid user factorio from 221.162.255.66 port 40508 ssh2 Oct 29 06:51:51 *** sshd[10605]: Failed password for invalid user gitlab from 221.162.255.66 port 53258 ssh2 Oct 29 07:29:08 *** sshd[11749]: Failed password for invalid user chughett from 221.162.255.66 port 40834 ssh2 Oct 29 08:06:06 *** sshd[12384]: Failed password for invalid user minecraft from 221.162.255.66 port 56626 ssh2 |
2019-10-30 05:17:50 |
| 200.84.180.163 | attack | Port 1433 Scan |
2019-10-30 04:55:09 |
| 222.186.180.223 | attack | SSH bruteforce (Triggered fail2ban) |
2019-10-30 05:09:43 |
| 211.169.249.156 | attackbots | Oct 29 21:30:35 *** sshd[16890]: User root from 211.169.249.156 not allowed because not listed in AllowUsers |
2019-10-30 05:31:24 |
| 51.254.123.131 | attackbots | Oct 29 21:27:19 SilenceServices sshd[31654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.123.131 Oct 29 21:27:21 SilenceServices sshd[31654]: Failed password for invalid user amerino from 51.254.123.131 port 60074 ssh2 Oct 29 21:31:54 SilenceServices sshd[2125]: Failed password for root from 51.254.123.131 port 41710 ssh2 |
2019-10-30 04:53:33 |
| 128.69.224.150 | attackbots | Unauthorized connection attempt from IP address 128.69.224.150 on Port 445(SMB) |
2019-10-30 05:13:06 |
| 54.180.134.173 | attack | 10/29/2019-17:28:12.808498 54.180.134.173 Protocol: 6 ET SCAN Potential SSH Scan |
2019-10-30 05:30:29 |